$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft File: HdFv1ov_fKsauRxV2mH8DN_0F0M.mft (raw, json) Hash identifier: 1LCHex76fEp8h3ZxfZhnq4Cv2DdLMnnCQ7CpdpekSOM= Subject key identifier: 65:72:AE:A4:95:27:45:18:2E:CB:DF:C0:DB:09:10:5A:C2:AD:66:B7 Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43 Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743 Certificate serial: 06A3 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft Manifest number: 0654 Signing time: Mon 20 Oct 2025 02:29:04 +0000 Manifest this update: Mon 20 Oct 2025 02:29:03 +0000 Manifest next update: Wed 22 Oct 2025 02:29:03 +0000 Files and hashes: 1: HdFv1ov_fKsauRxV2mH8DN_0F0M.crl (hash: H5GUPlBceatybzJG+vFc5yQ0GM0YN/oAt1wK83RdJcE=) 2: 10E2A890A01911F08A266CD6DAE4EC9C.roa (hash: uKu9ra8g3enObejQKUm/wjJcdExGU8pfNmFnYSCVAb4=) 3: C048D206A01811F0997A41D6DAE4EC9C.roa (hash: jhoKyB34pvQ8xNX0wPMbhbFsPkWoO13xc3OlqRsvcuI=) 4: 87292E6AA01A11F0B32F60DFDAE4EC9C.roa (hash: 4nhIZUohQE/GQcQXC4C3luqxwBzt+U4vIAe9MdQWT3w=) 5: 2AC075F0A01211F0B72F98A6DAE4EC9C.roa (hash: DK9ydq1ArB3m61vuEV0TSdIjbjRvzTpBgOxKOB1u+wk=) 6: 77AA62BAA01511F0949C90BEDAE4EC9C.roa (hash: 6sOD9vGb7J0UzCC20Wr5l2Kfav4Tkbio/BxVpX+Krt0=) 7: 8CEA5014A01411F0BFEF7AB9DAE4EC9C.roa (hash: ZmcJKQbrWBpIwE/ww8rZLi/ZhcQN8hLklhkP+Cw6Oig=) 8: E64C3C80A01411F0B09CCEB9DAE4EC9C.roa (hash: P67lgxodJONkr5xhx0/ZwVViknbWq1lQZGMlbP6XgkY=) 9: 69351E4CA01411F0BCA38EB5DAE4EC9C.roa (hash: qo4MdTAgB+4LLeVyw25K2zTCPmiwmmx5+hWl/ARollk=) 10: 46A7485EA01A11F08EC941DFDAE4EC9C.roa (hash: 7n38aPRG6DfSsFKjw2v4HaAQ/mbzm69U8oIgVsOvwZ8=) 11: 18112B68A01A11F09DD253DDDAE4EC9C.roa (hash: iHeBmMWWg3WS1fulXf5vlgJuM8lCwPKmaQN2zjvQXXM=) 12: 9E2163FAA01811F09E3578D2DAE4EC9C.roa (hash: eDRADB256Y80jHNt3k4fhbDC5ZHAHMd6Ca6OrAqbwIg=) 13: 0B6A72E4A01411F0AD73C0B4DAE4EC9C.roa (hash: Y4CZp0DWrQMWNjkjyjpL08rU6hNDzV3WDuwJ4b5/tIE=) 14: 3F380060A01311F0919EC6AFDAE4EC9C.roa (hash: ML1Fpn+T9RKdP9udPwEg1TO7ruJ5fEp150SBZcWBHGg=) 15: 7D736F44A01911F09753BADADAE4EC9C.roa (hash: LoMK2CKg1w2sxKBIOF7rjm0R24WlzIzFWpE/7DH5x8E=) 16: 33EB252EA01411F08F17EEB4DAE4EC9C.roa (hash: nzlwWU3jybg0Z5LtyVm9+qYiW7rcBwW9fpuAtDJVz3c=) 17: 508EE634A01911F087E8F1D6DAE4EC9C.roa (hash: 4FyWxdVz9ZB89dnEYa1UQaV9BgwPCDZcCQ64zRWzhRY=) 18: EA82641AA01311F09744A3B4DAE4EC9C.roa (hash: PvyVycDl600xSYGgD1LSND0w48iaigMGKSIG0uMiAw4=) 19: 9D32F69A977E11F097D5EA99DAE4EC9C.roa (hash: 8T6MXp4d7k4QlXY2d72nQUcRick423J+7EbbPvV9VsA=) 20: F19DC41AA01811F09F5B62D6DAE4EC9C.roa (hash: TZ8+f6VOZFccWd8TuXEcbvL38bAwB9OZXRVHDIZr0No=) 21: 4C032782A01511F0999B65BEDAE4EC9C.roa (hash: ANPrThqCPCkYsx7dRQ398hItHVf+UOOUIIoPdsOJOUo=) 22: A34959B8A01911F0A89ED4DADAE4EC9C.roa (hash: E3HAjnixDN1XWV/LOWT5w5sQJ03lSjiuDVqAWFJfBmI=) 23: C642CE7CA01411F0B494AFB9DAE4EC9C.roa (hash: aqI2o4BrWljOyaNlrUsbDBgDucPGaFRS97cYN1ybOns=) 24: 94B2F070A01511F0B59AAFBEDAE4EC9C.roa (hash: kwH5u3K/Hl+qIz66y3+qwY9El0PaIlycS18OnhiM728=) 25: 2F962140A01911F081B8AED6DAE4EC9C.roa (hash: ujK0C2V+Qi9u6MTQjYHs+CJbsfw5+IZrPSzJeVNBBYs=) 26: 04AB017A977D11F0A97D3391DAE4EC9C.roa (hash: nkdk6GBaqBguv0UXSrzYeA5QBtv1EdIeuvUWxhgAHHY=) 27: 93B9577EA01311F0B7824FB0DAE4EC9C.roa (hash: mkR2GLOQGEWqlqYNGWBX32sAXhIvbJfjR8LQZ8jggh0=) 28: C2CC2352A01311F0BA2D6BB2DAE4EC9C.roa (hash: 8dkPZG1bVKa6ng9BDONfAwpgPvxPAcZCz/nmcH4/hSQ=) 29: FD658BE4A01211F0BF85CAABDAE4EC9C.roa (hash: Jjrt4iFN9aQQeExy1Q5uaDTAkOEyoLMTHJMPctSRjM0=) 30: 6DA4387EA01311F08B3FF2AFDAE4EC9C.roa (hash: SoreU7BbeZI0MVABkoxSNUmBXY1Qer83v7w3hSgZbOk=) 31: CC94B1F0A01911F0A21BE7DADAE4EC9C.roa (hash: eol3C2aK1kCFY/RXjcfLIKnAxFpxEJhGrZQgt5Mo8mo=) 32: 28E4B6B2A01511F0BAD17CBCDAE4EC9C.roa (hash: O+8YfGKgcic5dSt9d0Vx7+HftSOAGPejOIugvkS/Q/Y=) 33: 072D5AC4A01511F09A0839BADAE4EC9C.roa (hash: yix9tcBAo74wcqdhwzt3WKH7uoqvm4BIlGZZkDl24+U=) 34: BE045106A01211F094A319ABDAE4EC9C.roa (hash: iFrlWdC+BKPWivrrH+4J7SzVi5ek4QeDzjIdOx16K2s=) 35: EE2BF774A01911F0B0CB31DBDAE4EC9C.roa (hash: HrO9DcmxgUKYwJpAAbnzvgRqkHtqT2odz+DewxsVQ7g=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 22 Oct 2025 00:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1699 (0x6a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743 Validity Not Before: Oct 20 02:29:03 2025 GMT Not After : Oct 22 02:29:03 2025 GMT Subject: CN=68f59e70-642e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:37:25:69:78:18:f2:05:d5:80:49:af:59:c9: 5d:89:21:58:6f:e5:f6:8e:32:ea:2d:a9:a4:05:6a: 2a:8d:00:61:8a:c8:58:18:1f:4f:7a:59:cd:86:1c: db:6b:17:b5:ae:6b:6f:38:e2:9d:fe:50:74:59:67: 96:e3:61:99:ed:e0:30:18:b4:c3:34:49:66:7e:fa: d4:e8:72:ed:3e:65:d5:3c:c5:c1:9b:02:f7:11:f9: 9b:3c:9f:3b:6f:52:e9:02:3e:8d:65:c0:5b:1a:f2: ee:a6:f7:f6:2c:f5:11:90:26:65:84:dc:27:63:1c: e4:1d:7a:0a:e6:fa:51:76:0d:89:58:4f:f9:f5:d2: a9:c7:77:df:35:3d:58:73:04:96:8b:29:81:49:22: 66:fe:f0:7b:26:93:cd:a9:82:68:5e:bd:90:1f:0a: 6b:38:85:26:73:86:a5:6b:54:b4:12:4a:24:3e:f6: 52:36:b2:b0:9c:7f:ac:52:3c:73:19:1d:4e:3c:fc: a1:ab:96:d2:37:99:d2:63:ae:fa:89:0c:eb:4a:c9: f8:56:3c:c8:6f:31:8c:ba:6e:d7:3c:f7:cc:06:91: 5b:d0:59:35:06:6b:06:5f:c7:51:97:e3:34:ad:a7: 75:f7:81:58:8d:0b:db:2d:34:81:2a:90:d6:47:c3: 08:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:72:AE:A4:95:27:45:18:2E:CB:DF:C0:DB:09:10:5A:C2:AD:66:B7 X509v3 Authority Key Identifier: keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:c1:47:15:55:de:b2:c3:9d:f7:99:d7:59:9d:71:83:ce:51: 29:1a:42:54:09:0b:bd:5e:34:ce:a9:e4:08:eb:7e:b2:b6:51: e6:d3:4b:5f:27:b5:4b:cf:35:b3:1d:4a:b3:be:68:9d:36:66: 07:7e:e5:46:ed:a8:13:cd:1c:11:b1:06:1d:5f:91:20:a3:4f: e1:71:e4:8a:41:5e:a7:53:45:70:3f:52:14:3e:d5:27:b1:c3: ca:ff:ec:42:9d:2a:16:ba:5b:e5:d9:f3:22:7d:fd:b3:3d:2d: 93:01:32:a2:c4:5a:25:a8:97:15:2e:02:0d:80:a7:bc:41:16: a0:49:62:fd:ad:be:3b:be:00:4e:a9:2b:21:ba:55:0b:9c:03: 77:9c:1a:f3:0e:3d:9c:a2:5b:c0:e6:77:f6:9d:47:b3:b2:cd: 95:98:6d:bc:a7:14:c6:52:ba:5f:a0:15:8b:b3:9e:50:fa:6f: 3f:19:35:6b:cb:aa:37:b0:e2:67:81:59:db:bb:1d:28:98:e9: 1f:a4:23:ff:9f:3b:a2:ea:c8:45:f4:cb:f4:ff:84:59:70:2f: 4c:1a:e3:97:d6:6d:43:2b:fd:2d:f9:a1:a6:0a:10:ca:06:a5: 9e:01:34:b7:cd:33:ab:5d:78:09:69:d3:f7:82:df:91:c6:5e: a0:cd:b1:96 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBqMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MjFDMDZBRjExMC8GA1UEBRMoMUREMTZGRDY4QkZGN0NBQjFBQjkxQzU1REE2MUZD MENERkY0MTc0MzAeFw0yNTEwMjAwMjI5MDNaFw0yNTEwMjIwMjI5MDNaMBgxFjAU BgNVBAMTDTY4ZjU5ZTcwLTY0MmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDsNyVpeBjyBdWASa9ZyV2JIVhv5faOMuotqaQFaiqNAGGKyFgYH096Wc2G HNtrF7Wua2844p3+UHRZZ5bjYZnt4DAYtMM0SWZ++tTocu0+ZdU8xcGbAvcR+Zs8 nztvUukCPo1lwFsa8u6m9/Ys9RGQJmWE3CdjHOQdegrm+lF2DYlYT/n10qnHd981 PVhzBJaLKYFJImb+8Hsmk82pgmhevZAfCms4hSZzhqVrVLQSSiQ+9lI2srCcf6xS PHMZHU48/KGrltI3mdJjrvqJDOtKyfhWPMhvMYy6btc898wGkVvQWTUGawZfx1GX 4zStp3X3gViNC9stNIEqkNZHwwhzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUZXKu pJUnRRguy9/A2wkQWsKtZrcwHwYDVR0jBBgwFoAUHdFv1ov/fKsauRxV2mH8DN/0 F0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4QTAxNENFL0hkRnYx b3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0hkRnYxb3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MjFDMDYvNThDOUI3OEMyMDU5MTFFQzk5MUI2ODc3RDhB MDE0Q0UvSGRGdjFvdl9mS3NhdVJ4VjJtSDhETl8wRjBNLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC0wUcVVd6yw533mddZnXGDzlEpGkJU CQu9XjTOqeQI636ytlHm00tfJ7VLzzWzHUqzvmidNmYHfuVG7agTzRwRsQYdX5Eg o0/hceSKQV6nU0VwP1IUPtUnscPK/+xCnSoWulvl2fMiff2zPS2TATKixFolqJcV LgINgKe8QRagSWL9rb47vgBOqSshulULnAN3nBrzDj2colvA5nf2nUezss2VmG28 pxTGUrpfoBWLs55Q+m8/GTVry6o3sOJngVnbux0omOkfpCP/nzui6shF9Mv0/4RZ cC9MGuOX1m1DK/0t+aGmChDKBqWeATS3zTOrXXgJadP3gt+Rxl6gzbGW -----END CERTIFICATE-----Generated at Mon Oct 20 13:04:26 2025 by rpki-client